Privacy Policy

When you interact with Elephant Tours — whether through our website, email, phone, WhatsApp, or in person — we may collect the following personal information:

• Identity Information: Full name, date of birth, nationality, and passport details (required for tour arrangements and hotel reservations).
• Contact Details: Email address, phone number, WhatsApp number, and mailing address.
• Travel Preferences: Dietary requirements (including kosher meal specifications), accessibility needs, preferred accommodation type, and any special requests.
• Payment Information: Billing details processed securely through our trusted third-party payment providers. We do not store full credit card numbers on our servers.
• Communication Records: Correspondence between you and our team, including inquiry forms, emails, and chat messages.
• Website Data: IP address, browser type, pages visited, and cookies (see Section 5 below).

We use your personal information exclusively for the purposes of delivering our travel services and improving your experience:

• Processing and managing your tour bookings, including coordination with hotels, transport providers, and kosher catering services.
• Communicating with you about your travel plans, itinerary changes, or important updates.
• Arranging accessibility requirements such as wheelchair-friendly vehicles and accommodations.
• Coordinating supervised kosher meals including meals with proper hashgacha (rabbinic supervision).
• Sending promotional materials and special offers, but only with your explicit consent.
• Improving our services, website, and overall customer experience based on aggregated, anonymized usage data.
• Complying with legal obligations and resolving disputes.

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Partners: Hotels, transport companies, kosher caterers, and local guides who need your details to deliver booked services.
• Payment Processors: Secure third-party payment services to process your transactions.
• Legal Requirements: When required by law, court order, or to protect the rights and safety of Elephant Tours, our clients, or the public.
• Immigration Authorities: Passport and visa-related details as required by Sri Lankan and Maldivian immigration regulations.

All service partners are bound by confidentiality agreements and are only provided the minimum information necessary to fulfil their role.

We take the security of your personal data seriously. We implement industry-standard security measures including SSL/TLS encryption for all data transmitted through our website, secure storage systems, restricted access to personal data on a need-to-know basis, and regular security assessments. While no method of electronic transmission is 100% secure, we strive to protect your information using commercially reasonable safeguards.

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for the website to function properly (e.g., session management).
• Analytics Cookies: Help us understand how visitors use our website so we can improve content and navigation. We use Google Analytics, which collects anonymized data.
• Marketing Cookies: Used only with your consent to show relevant travel offers and advertisements.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of any inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Opt-Out: Unsubscribe from marketing communications at any time via the link in our emails or by contacting us directly.
• Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

Our website may contain links to third-party websites (e.g., TripAdvisor, hotel booking platforms, social media). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

Our services are designed for families and travellers of all ages. However, we do not knowingly collect personal information from children under 16 without parental consent. If you believe a child has provided us with personal data without parental permission, please contact us, and we will promptly delete the information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.